If you already implemented the IM notification system between SCOM and Lync, you certainly saw the alert below a lot of time. Each time that an alert is raised in SCOM, an IM will be sent to the user via SIP (Lync, ….). Now, if SCOM sends the notification message when the user is offline, the IM will not be delivered and the alert below is raised.
This alert is used for all the notifications problems that could happen (Mail, IM, SMS,…) and cannot be easily fine-tuned by an override. The only way to get rid of this alert about IM notification when an user is offline, it’s to completely disable this “Failed to send through device alerting rule” and recreate a new one with a more advanced filter.
Step 1: Disable the “Failed to send through device alerting rule” rule.
Step 2: Create a new rule with the confirmation below
Rule Type > Alert Generating Rules > Event Based > Nt Event Log (Alert).
Select a management pack and click on Next.
Specify the Rule Name and Description. As Rule Category, select Alert and Alert Notification Subscription Server as Rule Target.
Configure the filer parameters as below:
- Event ID equals 31503
- Event Source equals Health Service Modules
- Parameter 1 equals $Target/ManagementGroup/Name$
- Parameter 5 does not equal sip
Use the following Alert Description:
Notification subsystem failed to send notification using device/server ‘$Data/Params/Param$’ over ‘$Data/Params/Param$’ protocol to ‘$Data/Params/Param$’. $Data/Params/Param$: $Data/Params/Param$. Rule id: $Data/Params/Param$